Tags: birdthief forensics 

Rating: 3.0

# Birdthief : FYSA

![Bi0s](https://github.com/a3X3k/Bi0s/blob/master/CTFs/RITSEC21/Assets/6.png?raw=true)

- Trying `Binwalk` in the given `PDF` shows many files.
- Extracting them gives image files.
- One of the images has the flag.
- Alternative - https://www.extractpdf.com/

![Bi0s](https://github.com/a3X3k/Bi0s/blob/master/CTFs/RITSEC21/Assets/9.png?raw=true)

![Bi0s](https://github.com/a3X3k/Bi0s/blob/master/CTFs/RITSEC21/Assets/10.png?raw=true)

![Bi0s](https://github.com/a3X3k/Bi0s/blob/master/CTFs/RITSEC21/Assets/7.jpg?raw=true)

```
Flag --> RS{Make_sure_t0_read_the_briefing}
```

Original writeup (https://github.com/a3X3k/Bi0s/tree/master/CTFs/RITSEC21/Forensics/Bird%20Thief%20FYSA).